{"id":5443,"date":"2026-03-01T21:47:50","date_gmt":"2026-03-01T12:47:50","guid":{"rendered":"https:\/\/eternalsphere.net\/echoes\/?p=5443"},"modified":"2026-06-06T10:32:25","modified_gmt":"2026-06-06T01:32:25","slug":"zeyvg5ernzmht8j","status":"publish","type":"post","link":"https:\/\/eternalsphere.net\/echoes\/index.php\/2026\/03\/01\/zeyvg5ernzmht8j\/","title":{"rendered":"Linux \u547d\u4ee4\u884c\u67e5\u770b SSL \u8bc1\u4e66\u6709\u6548\u671f\u7684\u65b9\u6cd5"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u5728\u670d\u52a1\u5668\u8fd0\u7ef4\u8fc7\u7a0b\u4e2d\uff0c\u7ecf\u5e38\u9700\u8981\u786e\u8ba4 SSL \u8bc1\u4e66\u662f\u5426\u5373\u5c06\u8fc7\u671f\u3002<br>\u5c24\u5176\u662f\u5728\u4f7f\u7528 Let&#8217;s Encrypt \u81ea\u52a8\u7b7e\u53d1\u8bc1\u4e66\u7684\u73af\u5883\u4e2d\uff0c\u5982\u679c\u672a\u53ca\u65f6\u53d1\u73b0\u8bc1\u4e66\u5931\u6548\uff0c\u53ef\u80fd\u5bfc\u81f4 HTTPS \u670d\u52a1\u4e2d\u65ad\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u672c\u6587\u8bb0\u5f55\u4e00\u79cd <strong>\u5b8c\u5168\u57fa\u4e8e\u547d\u4ee4\u884c<\/strong> \u7684\u8bc1\u4e66\u6709\u6548\u671f\u68c0\u67e5\u65b9\u6cd5\uff0c\u9002\u7528\u4e8e\u4efb\u4f55 Linux \u7cfb\u7edf\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e00\u3001\u8bc1\u4e66\u6587\u4ef6\u7ed3\u6784<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5178\u578b\u7684\u8bc1\u4e66\u76ee\u5f55\u5982\u4e0b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssl_certificates\/\n\u251c\u2500\u2500 fullchain.pem\n\u2514\u2500\u2500 privkey.pem\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf4\u660e\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>fullchain.pem<\/code>\uff1a\u5b8c\u6574\u8bc1\u4e66\u94fe\uff08\u670d\u52a1\u5668\u8bc1\u4e66 + \u4e2d\u95f4\u8bc1\u4e66\uff09<\/li>\n\n\n\n<li><code>privkey.pem<\/code>\uff1a\u79c1\u94a5\u6587\u4ef6<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u67e5\u770b\u8bc1\u4e66\u6709\u6548\u671f\u65f6\uff0c\u4ec5\u9700\u8981 <code>fullchain.pem<\/code>\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e8c\u3001\u67e5\u770b\u8bc1\u4e66\u751f\u6548\u65f6\u95f4\u4e0e\u8fc7\u671f\u65f6\u95f4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528 <code>openssl<\/code>\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl x509 -in fullchain.pem -noout -dates\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u793a\u4f8b\u8f93\u51fa\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>notBefore=Feb 27 04:12:34 2026 GMT\nnotAfter=May 28 04:12:33 2026 GMT\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b57\u6bb5\u542b\u4e49\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u5b57\u6bb5<\/th><th>\u542b\u4e49<\/th><\/tr><\/thead><tbody><tr><td>notBefore<\/td><td>\u8bc1\u4e66\u5f00\u59cb\u751f\u6548\u65f6\u95f4<\/td><\/tr><tr><td>notAfter<\/td><td>\u8bc1\u4e66\u8fc7\u671f\u65f6\u95f4<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5176\u4e2d <strong>notAfter<\/strong> \u662f\u6700\u9700\u8981\u5173\u6ce8\u7684\u5b57\u6bb5\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e09\u3001\u4ec5\u67e5\u770b\u8bc1\u4e66\u8fc7\u671f\u65f6\u95f4\uff08\u5e38\u7528\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u53ea\u5173\u5fc3\u8bc1\u4e66\u4f55\u65f6\u5931\u6548\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl x509 -in fullchain.pem -noout -enddate\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8f93\u51fa\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>notAfter=May 28 04:12:33 2026 GMT\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u9002\u5408\u811a\u672c\u68c0\u6d4b\u6216\u5feb\u901f\u4eba\u5de5\u786e\u8ba4\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u56db\u3001\u67e5\u770b\u5b8c\u6574\u8bc1\u4e66\u4fe1\u606f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f53\u9700\u8981\u6392\u67e5 HTTPS \u6216 TLS \u95ee\u9898\u65f6\uff0c\u53ef\u4ee5\u67e5\u770b\u5b8c\u6574\u8bc1\u4e66\u5185\u5bb9\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl x509 -in fullchain.pem -text -noout\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u83b7\u5f97\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u8bc1\u4e66\u7b7e\u53d1\u673a\u6784\uff08Issuer\uff09<\/li>\n\n\n\n<li>\u57df\u540d\u4fe1\u606f\uff08SAN\uff09<\/li>\n\n\n\n<li>\u516c\u94a5\u7b97\u6cd5<\/li>\n\n\n\n<li>\u6307\u7eb9\u4fe1\u606f<\/li>\n\n\n\n<li>\u6709\u6548\u671f<\/li>\n\n\n\n<li>\u6269\u5c55\u5b57\u6bb5<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u65b9\u5f0f\u5e38\u7528\u4e8e\u53cd\u5411\u4ee3\u7406\u6216 TLS \u63e1\u624b\u95ee\u9898\u5206\u6790\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e94\u3001\u8ba1\u7b97\u8bc1\u4e66\u5269\u4f59\u6709\u6548\u5929\u6570<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u670d\u52a1\u5668\u81ea\u52a8\u5316\u8fd0\u7ef4\u4e2d\uff0c\u901a\u5e38\u9700\u8981\u5224\u65ad\u8bc1\u4e66\u8fd8\u5269\u591a\u5c11\u5929\u8fc7\u671f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4f7f\u7528\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>echo $(( \\\n($(date -d \"$(openssl x509 -enddate -noout -in fullchain.pem | cut -d= -f2)\" +%s) \\\n- $(date +%s)) \/ 86400 ))\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u793a\u4f8b\u8f93\u51fa\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>58\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8868\u793a\u8bc1\u4e66\u8fd8\u6709 <strong>58 \u5929\u5230\u671f<\/strong>\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u516d\u3001\u5b9e\u9645\u8fd0\u7ef4\u5efa\u8bae<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u957f\u671f\u8fd0\u884c\u7684\u670d\u52a1\u5668\u73af\u5883\u4e2d\uff0c\u5efa\u8bae\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u5b9a\u671f\u68c0\u67e5\u8bc1\u4e66\u5269\u4f59\u5929\u6570<\/li>\n\n\n\n<li>\u5728\u5269\u4f59 30 \u5929\u4ee5\u5185\u89e6\u53d1\u66f4\u65b0<\/li>\n\n\n\n<li>\u914d\u5408\u81ea\u52a8\u7eed\u671f\u5de5\u5177\u4f7f\u7528<\/li>\n\n\n\n<li>\u5c06\u68c0\u6d4b\u811a\u672c\u52a0\u5165\u5b9a\u65f6\u4efb\u52a1<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u6837\u53ef\u4ee5\u907f\u514d HTTPS \u670d\u52a1\u56e0\u8bc1\u4e66\u8fc7\u671f\u800c\u4e2d\u65ad\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e03\u3001\u603b\u7ed3<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Linux \u4e0b\u68c0\u67e5 SSL \u8bc1\u4e66\u6709\u6548\u671f\u7684\u6838\u5fc3\u5de5\u5177\u53ea\u6709\u4e00\u4e2a\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5e38\u7528\u547d\u4ee4\u53ef\u7b80\u5316\u4e3a\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u76ee\u7684<\/th><th>\u547d\u4ee4<\/th><\/tr><\/thead><tbody><tr><td>\u67e5\u770b\u6709\u6548\u671f<\/td><td><code>openssl x509 -noout -dates<\/code><\/td><\/tr><tr><td>\u67e5\u770b\u8fc7\u671f\u65f6\u95f4<\/td><td><code>-enddate<\/code><\/td><\/tr><tr><td>\u67e5\u770b\u5168\u90e8\u4fe1\u606f<\/td><td><code>-text<\/code><\/td><\/tr><tr><td>\u5269\u4f59\u5929\u6570\u8ba1\u7b97<\/td><td>date + openssl<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u65b9\u6cd5\u65e0\u9700\u4f9d\u8d56 Web \u670d\u52a1\u6216\u6d4f\u89c8\u5668\uff0c\u9002\u7528\u4e8e\u8fdc\u7a0b\u670d\u52a1\u5668\u3001\u5bb9\u5668\u73af\u5883\u53ca\u81ea\u52a8\u5316\u8fd0\u7ef4\u573a\u666f\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u670d\u52a1\u5668\u8fd0\u7ef4\u8fc7\u7a0b\u4e2d\uff0c\u7ecf\u5e38\u9700\u8981\u786e\u8ba4 SSL \u8bc1\u4e66\u662f\u5426\u5373\u5c06\u8fc7\u671f\u3002\u5c24\u5176\u662f\u5728\u4f7f\u7528 Let&#8217;s Encrypt \u81ea\u52a8\u7b7e\u53d1\u8bc1\u4e66\u7684\u73af\u5883\u4e2d\uff0c\u5982\u679c\u672a\u53ca\u65f6\u53d1\u73b0\u8bc1\u4e66\u5931\u6548\uff0c\u53ef\u80fd\u5bfc\u81f4 HTTPS \u670d\u52a1\u4e2d\u65ad\u3002 \u672c\u6587\u8bb0\u5f55\u4e00\u79cd \u5b8c\u5168\u57fa\u4e8e\u547d\u4ee4\u884c \u7684\u8bc1\u4e66\u6709\u6548\u671f\u68c0\u67e5\u65b9\u6cd5\uff0c\u9002\u7528\u4e8e\u4efb\u4f55 Linux \u7cfb\u7edf\u3002 \u4e00\u3001\u8bc1\u4e66\u6587\u4ef6\u7ed3\u6784 \u5178\u578b\u7684\u8bc1\u4e66\u76ee\u5f55\u5982\u4e0b\uff1a \u8bf4\u660e\uff1a \u67e5\u770b\u8bc1\u4e66\u6709\u6548\u671f\u65f6\uff0c\u4ec5\u9700\u8981 fullchain.pem\u3002 \u4e8c\u3001\u67e5\u770b\u8bc1\u4e66\u751f\u6548\u65f6\u95f4\u4e0e\u8fc7\u671f\u65f6\u95f4 \u4f7f\u7528 openssl\uff1a \u793a\u4f8b\u8f93\u51fa\uff1a \u5b57\u6bb5\u542b\u4e49\uff1a \u5b57\u6bb5 \u542b\u4e49 notBefore \u8bc1\u4e66\u5f00\u59cb\u751f\u6548\u65f6\u95f4 notAfter \u8bc1\u4e66\u8fc7\u671f\u65f6\u95f4 \u5176\u4e2d notAfter \u662f\u6700\u9700\u8981\u5173\u6ce8\u7684\u5b57\u6bb5\u3002 \u4e09\u3001\u4ec5\u67e5\u770b\u8bc1\u4e66\u8fc7\u671f\u65f6\u95f4\uff08\u5e38\u7528\uff09 \u5982\u679c\u53ea\u5173\u5fc3\u8bc1\u4e66\u4f55\u65f6\u5931\u6548\uff1a \u8f93\u51fa\u793a\u4f8b\uff1a \u9002\u5408\u811a\u672c\u68c0\u6d4b\u6216\u5feb\u901f\u4eba\u5de5\u786e\u8ba4\u3002 \u56db\u3001\u67e5\u770b\u5b8c\u6574\u8bc1\u4e66\u4fe1\u606f \u5f53\u9700\u8981\u6392\u67e5 HTTPS \u6216 TLS \u95ee\u9898\u65f6\uff0c\u53ef\u4ee5\u67e5\u770b\u5b8c\u6574\u8bc1\u4e66\u5185\u5bb9\uff1a \u53ef\u83b7\u5f97\uff1a \u8be5\u65b9\u5f0f\u5e38\u7528\u4e8e\u53cd\u5411\u4ee3\u7406\u6216 TLS \u63e1\u624b\u95ee\u9898\u5206\u6790\u3002 \u4e94\u3001\u8ba1\u7b97\u8bc1\u4e66\u5269\u4f59\u6709\u6548\u5929\u6570 \u670d\u52a1\u5668\u81ea\u52a8\u5316\u8fd0\u7ef4\u4e2d\uff0c\u901a\u5e38\u9700\u8981\u5224\u65ad\u8bc1\u4e66\u8fd8\u5269\u591a\u5c11\u5929\u8fc7\u671f\u3002 \u53ef\u4f7f\u7528\uff1a \u793a\u4f8b\u8f93\u51fa\uff1a &hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[192],"tags":[],"class_list":["post-5443","post","type-post","status-publish","format-standard","hentry","category-1t9inq1lt4wjw1t"],"_links":{"self":[{"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/posts\/5443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/comments?post=5443"}],"version-history":[{"count":1,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/posts\/5443\/revisions"}],"predecessor-version":[{"id":5444,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/posts\/5443\/revisions\/5444"}],"wp:attachment":[{"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/media?parent=5443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/categories?post=5443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eternalsphere.net\/echoes\/index.php\/wp-json\/wp\/v2\/tags?post=5443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}